{"id":"https://openalex.org/W4390604544","doi":"https://doi.org/10.1109/tsc.2024.3349784","title":"High-Frequency Matters: Attack and Defense for Image-Processing Model Watermarking","display_name":"High-Frequency Matters: Attack and Defense for Image-Processing Model Watermarking","publication_year":2024,"publication_date":"2024-01-05","ids":{"openalex":"https://openalex.org/W4390604544","doi":"https://doi.org/10.1109/tsc.2024.3349784"},"language":"en","primary_location":{"id":"doi:10.1109/tsc.2024.3349784","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsc.2024.3349784","pdf_url":null,"source":{"id":"https://openalex.org/S204223317","display_name":"IEEE Transactions on Services Computing","issn_l":"1939-1374","issn":["1939-1374","2372-0204"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Services Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5115076542","display_name":"Huajie Chen","orcid":"https://orcid.org/0009-0009-8489-9386"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Huajie Chen","raw_affiliation_strings":["Centre for Cyber Security and Privacy, School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0009-0009-8489-9386","affiliations":[{"raw_affiliation_string":"Centre for Cyber Security and Privacy, School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036801346","display_name":"Tianqing Zhu","orcid":"https://orcid.org/0000-0003-3411-7947"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Tianqing Zhu","raw_affiliation_strings":["Centre for Cyber Security and Privacy, School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0003-3411-7947","affiliations":[{"raw_affiliation_string":"Centre for Cyber Security and Privacy, School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100705183","display_name":"Chi Liu","orcid":"https://orcid.org/0000-0002-6428-5514"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]},{"id":"https://openalex.org/I6469544","display_name":"City University of Macau","ror":"https://ror.org/04gpd4q15","country_code":"MO","type":"education","lineage":["https://openalex.org/I6469544"]}],"countries":["AU","MO"],"is_corresponding":false,"raw_author_name":"Chi Liu","raw_affiliation_strings":["Institute of Data Science, City University of Macau, Macao SAR, China","Centre for Cyber Security and Privacy, School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-6428-5514","affiliations":[{"raw_affiliation_string":"Institute of Data Science, City University of Macau, Macao SAR, China","institution_ids":["https://openalex.org/I6469544"]},{"raw_affiliation_string":"Centre for Cyber Security and Privacy, School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005228053","display_name":"Shui Yu","orcid":"https://orcid.org/0000-0003-4485-6743"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shui Yu","raw_affiliation_strings":["Centre for Cyber Security and Privacy, School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0003-4485-6743","affiliations":[{"raw_affiliation_string":"Centre for Cyber Security and Privacy, School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051406984","display_name":"Wanlei Zhou","orcid":"https://orcid.org/0000-0002-1680-2521"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]},{"id":"https://openalex.org/I6469544","display_name":"City University of Macau","ror":"https://ror.org/04gpd4q15","country_code":"MO","type":"education","lineage":["https://openalex.org/I6469544"]}],"countries":["AU","MO"],"is_corresponding":false,"raw_author_name":"Wanlei Zhou","raw_affiliation_strings":["Institute of Data Science, City University of Macau, Macao SAR, China","Centre for Cyber Security and Privacy, School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-1680-2521","affiliations":[{"raw_affiliation_string":"Institute of Data Science, City University of Macau, Macao SAR, China","institution_ids":["https://openalex.org/I6469544"]},{"raw_affiliation_string":"Centre for Cyber Security and Privacy, School of Computer Science, University of Technology Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.6217,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.90791403,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"17","issue":"4","first_page":"1565","last_page":"1579"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/watermark","display_name":"Watermark","score":0.8872712850570679},{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.8846417665481567},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8433243632316589},{"id":"https://openalex.org/keywords/overfitting","display_name":"Overfitting","score":0.8292014002799988},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6731820106506348},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5806291103363037},{"id":"https://openalex.org/keywords/frequency-domain","display_name":"Frequency domain","score":0.5376198887825012},{"id":"https://openalex.org/keywords/image-processing","display_name":"Image processing","score":0.4464800953865051},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.43597516417503357},{"id":"https://openalex.org/keywords/signal-processing","display_name":"Signal processing","score":0.41881808638572693},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.41291433572769165},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.3714064657688141},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.36060380935668945},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3525438904762268},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.34197407960891724},{"id":"https://openalex.org/keywords/digital-signal-processing","display_name":"Digital signal processing","score":0.09417194128036499},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.08967483043670654}],"concepts":[{"id":"https://openalex.org/C164112704","wikidata":"https://www.wikidata.org/wiki/Q7974348","display_name":"Watermark","level":3,"score":0.8872712850570679},{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.8846417665481567},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8433243632316589},{"id":"https://openalex.org/C22019652","wikidata":"https://www.wikidata.org/wiki/Q331309","display_name":"Overfitting","level":3,"score":0.8292014002799988},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6731820106506348},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5806291103363037},{"id":"https://openalex.org/C19118579","wikidata":"https://www.wikidata.org/wiki/Q786423","display_name":"Frequency domain","level":2,"score":0.5376198887825012},{"id":"https://openalex.org/C9417928","wikidata":"https://www.wikidata.org/wiki/Q1070689","display_name":"Image processing","level":3,"score":0.4464800953865051},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.43597516417503357},{"id":"https://openalex.org/C104267543","wikidata":"https://www.wikidata.org/wiki/Q208163","display_name":"Signal processing","level":3,"score":0.41881808638572693},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.41291433572769165},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.3714064657688141},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36060380935668945},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3525438904762268},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.34197407960891724},{"id":"https://openalex.org/C84462506","wikidata":"https://www.wikidata.org/wiki/Q173142","display_name":"Digital signal processing","level":2,"score":0.09417194128036499},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.08967483043670654},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tsc.2024.3349784","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsc.2024.3349784","pdf_url":null,"source":{"id":"https://openalex.org/S204223317","display_name":"IEEE Transactions on Services Computing","issn_l":"1939-1374","issn":["1939-1374","2372-0204"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Services Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":42,"referenced_works":["https://openalex.org/W1542157244","https://openalex.org/W1901129140","https://openalex.org/W2064076387","https://openalex.org/W2105301089","https://openalex.org/W2113654250","https://openalex.org/W2579318729","https://openalex.org/W2756154119","https://openalex.org/W2764043458","https://openalex.org/W2771036112","https://openalex.org/W2796299376","https://openalex.org/W2892212215","https://openalex.org/W2892948265","https://openalex.org/W2896409484","https://openalex.org/W2919023666","https://openalex.org/W2962872206","https://openalex.org/W2963026768","https://openalex.org/W2963073614","https://openalex.org/W2963363373","https://openalex.org/W2963676366","https://openalex.org/W2964128659","https://openalex.org/W2964212750","https://openalex.org/W2995838630","https://openalex.org/W2997717738","https://openalex.org/W3025612445","https://openalex.org/W3102097413","https://openalex.org/W3133747496","https://openalex.org/W3135872251","https://openalex.org/W3142067920","https://openalex.org/W3167389445","https://openalex.org/W3175786209","https://openalex.org/W3203605797","https://openalex.org/W3206880386","https://openalex.org/W4238136161","https://openalex.org/W4361019587","https://openalex.org/W4386798592","https://openalex.org/W6745148473","https://openalex.org/W6746523225","https://openalex.org/W6750186640","https://openalex.org/W6755843862","https://openalex.org/W6771539078","https://openalex.org/W6785895317","https://openalex.org/W6850967494"],"related_works":["https://openalex.org/W2137394636","https://openalex.org/W2358993821","https://openalex.org/W1516446231","https://openalex.org/W2098152888","https://openalex.org/W1559740347","https://openalex.org/W2040356834","https://openalex.org/W2080353903","https://openalex.org/W2385289568","https://openalex.org/W2381486749","https://openalex.org/W1514507288"],"abstract_inverted_index":{"In":[0],"recent":[1],"years,":[2],"there":[3],"has":[4,77],"been":[5],"significant":[6],"advancement":[7],"in":[8,44,61,93,111,127,184],"the":[9,16,45,49,55,62,82,87,94,98,112,115,122,151,163,171,185,200,205],"field":[10],"of":[11,18,30,36,48,64,81,97,114,124],"model":[12,67,70],"watermarking":[13,130,152,164,187],"techniques.":[14],"However,":[15],"protection":[17],"image-processing":[19,133],"neural":[20],"networks":[21,134],"remains":[22],"a":[23,27,42,65,157],"challenge,":[24],"with":[25,135],"only":[26],"limited":[28],"number":[29],"methods":[31],"being":[32],"developed.":[33],"The":[34,118,154],"objective":[35],"these":[37],"techniques":[38],"is":[39,90,166],"to":[40,168,203],"embed":[41],"watermark":[43,56,88,110],"output":[46,63,113],"images":[47],"target":[50],"generative":[51,116],"network,":[52,173],"so":[53],"that":[54,86,106],"signal":[57,89],"can":[58,190],"be":[59],"detected":[60],"surrogate":[66],"obtained":[68],"through":[69],"extraction":[71],"attacks.":[72],"This":[73],"promising":[74],"technique,":[75],"however,":[76],"certain":[78],"limits.":[79],"Analysis":[80],"frequency":[83],"domain":[84],"reveals":[85],"mainly":[91],"concealed":[92],"high-frequency":[95],"components":[96],"output.":[99],"Thus,":[100],"we":[101,145,179,198],"propose":[102,146],"an":[103,136,147,181],"overwriting":[104,172],"attack":[105,126],"involves":[107],"forging":[108],"another":[109],"network.":[117,153],"experimental":[119],"results":[120],"demonstrate":[121],"efficacy":[123],"this":[125,143,196],"sabotaging":[128],"existing":[129,186],"schemes":[131],"for":[132,150],"almost":[137],"100%":[138],"success":[139],"rate.":[140],"To":[141,194],"counter":[142],"attack,":[144],"adversarial":[148,159],"framework":[149,155],"incorporates":[156],"specially-designed":[158],"training":[160,201],"step,":[161],"where":[162],"network":[165],"trained":[167],"defend":[169],"against":[170],"thereby":[174],"enhancing":[175],"its":[176],"robustness.":[177],"Additionally,":[178],"observe":[180],"overfitting":[182,206],"phenomenon":[183],"method,":[188],"which":[189],"render":[191],"it":[192],"ineffective.":[193],"address":[195],"issue,":[197],"modify":[199],"process":[202],"eliminate":[204],"problem.":[207]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":3}],"updated_date":"2026-07-25T09:21:30.201066","created_date":"2025-10-10T00:00:00"}